StackRadar

CVE-2025-50181

Medium

Advisory

Published 18 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
762
of 17,787 indexed, latest versions
Container images
811
deployed by those charts
Fix available
4 of 4
affected packages

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

Carried by container images the latest versions of 762 of 17,787 indexed charts deploy, on 811 images.

Affected packageAffected versionsFixed inImages
python-urllib3deb1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2, 1.22-1ubuntu0.18.04.1, 1.22-1ubuntu0.18.04.2+9 more1.13.1-2ubuntu0.16.04.4+esm3, 1.22-1ubuntu0.18.04.2+esm3, 1.25.8-2ubuntu0.4+esm1, 1.26.5-1~exp1ubuntu0.3+1 more52
urllib3pypi1.7.1, 1.10.2, 1.13.1, 1.19.1+48 more2.5.0801
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+3 more22.0.2+dfsg-1ubuntu0.6, 24.0+dfsg-1ubuntu1.215
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r126.1.1-r03
OSV records
CGA-4hfw-26xr-4q65CGA-p24r-46cw-ghmgDEBIAN-CVE-2025-50181GHSA-pq67-6m6q-mj2vUBUNTU-CVE-2025-50181
Also known as
CGA-8wpc-jwj7-w5v8, CGA-qw3g-vj75-jcvc, PYSEC-2026-1999, USN-7599-1, USN-7599-2

Charts affected

762 by stars
ChartLatestAffected imagesRadar Score
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
urllib3@1.26.5
2.5.0

Open the chart page →

12,063
vmware-exporterkremers2.3.01 of 1See more

vmware-exporter kremers 2.3.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.479925e63e59f
urllib3@1.26.12
2.5.0

Open the chart page →

1,180
kronickronic0.1.71 of 1See more

kronic kronic 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/mshade/kronic:v0.1.466e3043851cd
urllib3@1.26.18
2.5.0

Open the chart page →

1,061
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
urllib3@2.2.1
2.5.0
langgenius/dify-sandbox:0.2.009b7e8705673
urllib3@2.2.1
2.5.0

Open the chart page →

20,424
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
urllib3@2.4.0
2.5.0

Open the chart page →

4,101
traefik-whitelist-ddnskubitodevVerified publisher1.0.51 of 1See more

traefik-whitelist-ddns kubitodev 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
kubitodev/traefik-ip-whitelist-sync:1.0.2aa24869319bf
urllib3@1.26.10
2.5.0

Open the chart page →

936
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
urllib3@2.3.0
2.5.0

Open the chart page →

2,668
neuvectorlifen1.5.21 of 3See more

neuvector lifen 1.5.2

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
neuvector/manager:3.2.1f1b7d666eae0
urllib3@1.25.3
2.5.0

Open the chart page →

2,747
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
py3-pip@25.2-r0
urllib3@2.0.7
26.1.1-r0
2.5.0

Open the chart page →

4,390
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
urllib3@2.3.0
2.5.0

Open the chart page →

2,763
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
urllib3@1.26.7
2.5.0

Open the chart page →

8,967
mlflow-controllermlflow-deployment-controller0.1.82 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

2 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
urllib3@1.26.14
2.5.0
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
urllib3@1.26.7
2.5.0

Open the chart page →

8,957
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
urllib3@1.26.13
2.5.0

Open the chart page →

5,804
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
urllib3@2.3.0
2.5.0

Open the chart page →

7,552
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
urllib3@1.24.3
2.5.0

Open the chart page →

5,104
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
urllib3@1.26.20
2.5.0
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
urllib3@1.26.20
2.5.0
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
urllib3@1.26.20
2.5.0

Open the chart page →

37,441
nessusnessus0.2.01 of 1See more

nessus nessus 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
tenableofficial/nessus:latestc88e43fe1a8c
urllib3@1.26.18
2.5.0

Open the chart page →

342
marge-botnetpositiveVerified publisher1.1.01 of 1See more

marge-bot netpositive 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.12.1a96c10b61a59
urllib3@2.0.4
2.5.0

Open the chart page →

1,253
opencveopencve1.2.01 of 3See more

opencve opencve 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
cleveritcz/opencve:1.5.0c75c1636e0b7
urllib3@1.25.11
2.5.0

Open the chart page →

2,097
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
urllib3@1.26.9
2.5.0

Open the chart page →

2,850
ovh-snapshoterovh-snapshoterOfficialVerified publisher0.4.101 of 1See more

ovh-snapshoter ovh-snapshoter 0.4.10

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
urllib3@2.2.3
2.5.0

Open the chart page →

761
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
python-urllib3@1.26.12-1+deb12u1
urllib3@1.26.12
1.26.12-1+deb12u2
2.5.0

Open the chart page →

6,890
pritunl-slack-apppritunl-slack-appVerified publisher0.1.71 of 1See more

pritunl-slack-app pritunl-slack-app 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
urllib3@1.26.18
2.5.0

Open the chart page →

2,871
pvc-exporterpvc-exporter0.1.31 of 1See more

pvc-exporter pvc-exporter 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
dockerid31415926/pvc-exporter:v0.1.35a1dd17e0e07
urllib3@1.26.7
2.5.0

Open the chart page →

1,762
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
urllib3@2.3.0
2.5.0

Open the chart page →

4,252
kube-resource-reportrlex0.10.11 of 2See more

kube-resource-report rlex 0.10.1

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:22.11.0c173cd02f5af
urllib3@1.26.13
2.5.0

Open the chart page →

1,266
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
urllib3@1.26.5
2.5.0

Open the chart page →

13,028
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
urllib3@1.26.14
2.5.0

Open the chart page →

3,942
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
python-urllib3@1.22-1ubuntu0.18.04.2
urllib3@1.22
1.22-1ubuntu0.18.04.2+esm3
2.5.0

Open the chart page →

13,562
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
urllib3@2.3.0
2.5.0

Open the chart page →

30,310
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
python-urllib3@1.26.12-1+deb12u1
urllib3@1.26.12
1.26.12-1+deb12u2
2.5.0

Open the chart page →

38,115
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
urllib3@1.26.14
2.5.0

Open the chart page →

4,052
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.683dbca3efd2a
urllib3@2.4.0
2.5.0

Open the chart page →

16,194
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
urllib3@2.3.0
2.5.0
dserio83/velero-watchdog:0.1.8d5deae589229
urllib3@2.3.0
2.5.0

Open the chart page →

11,545
kube-resource-reportslamdev0.1.31 of 2See more

kube-resource-report slamdev 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:21.2.145f93491c434
urllib3@1.26.3
2.5.0

Open the chart page →

1,534
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
urllib3@2.2.3
2.5.0

Open the chart page →

2,934
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
urllib3@1.26.18
2.5.0

Open the chart page →

7,684
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
urllib3@1.26.12
2.5.0
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
urllib3@1.26.12
2.5.0

Open the chart page →

46,028
mysql-backupsoftonic2.2.31 of 1See more

mysql-backup softonic 2.2.3

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
softonic/mysql-backup:0.4.0d9487a8dd70f
urllib3@1.26.8
2.5.0

Open the chart page →

547
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
urllib3@1.26.7
2.5.0

Open the chart page →

3,162
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
urllib3@1.26.15
2.5.0

Open the chart page →

2,236
splunk-operatorstakaterVerified publisher0.0.61 of 2See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
splunk/splunk-operator:2.0.0c4e0d3146226
urllib3@1.24.2
2.5.0

Open the chart page →

11,459
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
urllib3@1.25.8
2.5.0

Open the chart page →

24,984
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
urllib3@1.25.9
2.5.0

Open the chart page →

2,469
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
urllib3@2.2.3
2.5.0

Open the chart page →

1,696
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
urllib3@1.26.8
2.5.0

Open the chart page →

3,332
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
urllib3@1.26.12
2.5.0

Open the chart page →

18,213
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.44138bea678f0
urllib3@1.26.16
2.5.0

Open the chart page →

9,108
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.44138bea678f0
urllib3@1.26.16
2.5.0

Open the chart page →

9,108
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
urllib3@2.2.2
2.5.0

Open the chart page →

4,461

Container images carrying it

811 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
urllib3@1.24.2
2.5.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
urllib3@2.2.3
2.5.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
urllib3@1.24.2
2.5.0
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
urllib3@1.26.7
2.5.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
urllib3@1.26.7
2.5.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
urllib3@2.1.0
2.5.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
urllib3@1.26.19
2.5.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
urllib3@1.26.5
2.5.0
1
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
urllib3@1.26.19
2.5.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3ed44d81a65de
urllib3@1.26.19
2.5.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
urllib3@1.26.19
2.5.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.